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(54) Fail-safe defibrillator 



(57) A defibrillator (10) having one or more redun- 
dant systems (202) each including functionally inter- 
changeable components (204) from which one compo- 
nent is selected for current operation. Manual or auto- 
matic selection of one component in each redundant 
system is made to form an operational defibrillator. Pref- 
erably, such selection is based on a real-time evaluation 
of the operational integrity of all operational components 
in a redundant system. Such real-time evaluations may 
be performed by monitoring systems (210) within a con- 
troller, by an external test system within or external to 
the defibrillator or by self-test mechanisms internal to 
the operational components themselves. Factors such 



as user preferences, default component assignment, 
and predetermined arrangements of operational com- 
ponent combinations may be included in the selection 
determination along with the operational integrity of 
each operational component. If certain, non-critical 
components fail with no functionally interchangeable 
components available, then the redundant system com- 
prising such a failed component is not made operational. 
The remaining systems of the defibrillator may still be 
implemented to form a defibrillator sufficient for defibril- 
lation yet lacking the capability to implement the func- 
tions allocated to the malfunctioning, degraded or oth- 
erwise absent redundant system. 
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Description 

Background of the Invention 

Field of The Invention 

[0001] The present invention relates generally to a 
portable external defibrillator and, more particularly, to 
a portable external defibrillator having redundant com- 
ponents to enable continued operation of defibrillator. 

Related Art 

[0002] Sudden cardiac arrest is a disruption of the 
heart's functioning that causes a lack of blood flow to 
vital organs. In a majority of instances, sudden cardiac 
arrest is manifested as an abnormal or chaotic heart 
rhythm, called fibrillation. These instances are generally 
identifiable by the victim's immediate loss of pulse, loss 
of consciousness and a cessation of breathing. 
[0003] Sudden cardiac arrest has been attributed to 
over 350,000 deaths each year in the United States, 
making it one of the country's leading medical emergen- 
cies. World-wide, sudden cardiac arrest has been attrib- 
uted to a much larger number of deaths each year. Un- 
less medical intervention is initiated, sudden cardiac ar- 
rest will lead to death within a matter of minutes. With 
rapid intervention, the survival rate for sudden cardiac 
arrest can be as high as 40%. 

[0004] There are four critical components of medical 
treatment that must be administered to a victim of sud- 
den cardiac arrest: (1) early access to emergency care; 
(2) early cardiopulmonary resuscitation to keep the 
blood oxygenated and flowing to the victim's brain and 
other vital organs; (3) early defibrillation (the application 
of an electrical shock to the heart) to restore the heart's 
regular rhythm; and (4) early access to advanced med- 
ical care. When a person is experiencing sudden cardi- 
ac arrest, the electrical activity within the heart becomes 
chaotic. An electric shock from a defibrillator can reor- 
ganize the electrical impulses to allow coordinated 
pumping action to resume. To administer this shock, 
special pads from a machine called a defibrillator are 
placed on the victim's chest, and an electric shock is 
sent through the victim's body from one pad to another. 
As used herein, the term "pads" will include both pads 
and paddles. 

[0005] If prompt cardiopulmonary resuscitation is fol- 
lowed by defibrillation within about four minutes, the vic- 
tim's chances of surviving sudden cardiac arrest can ap- 
proach or exceed 40%. Prompt administration of defi- 
brillation within the first critical minutes is considered 
one of the most important components of emergency 
medical treatment for preventing death from sudden 
cardiac arrest. 

[0006] Since prompt defibrillation is critical to survival, 
portable defibrillators have been developed that can be 
carried to the victim's location to defibrillate the victim 



prior to reaching a hospital. These portable defibrilla- 
tors, like other sensitive electronic equipment, occasion- 
ally can malfunction or otherwise be unable to operate 
properly. While malfunctioning of typical electronic 
5 equipment is inconvenient, a malfunctioning defibrillator 
can be fatal to the patient in sudden cardiac arrest. Ac- 
cordingly, it would be advantageous to have a defibril- 
lator that could minimize the effects of any malfunction. 

10 Summary of the Invention 

[0007] The present invention is a defibrillator having 
one or more redundant systems each including function- 
ally interchangeable components from which one such 

15 component is selected for current operation. As used 
herein, the term "component" refers to any operational 
element of the defibrillator, and may include, for exam- 
ple, circuits, processors, mechanical components, sub- 
systems or any combination thereof. Manual or auto- 

20 matic selection of one operational component in each 
redundant system is made to form an operational defi- 
brillator. Preferably, such selection is based on a real- 
time evaluation of the operational integrity of all opera- 
tional components in a redundant system. In one em- 

25 bodiment, a default operational component is selected 
for each redundant system. The default operational 
component is initially selected to be put into operation 
unless or until a malfunction occurs. Such real-time 
evaluations may be performed by monitoring systems 

30 within a selection system, by an external test system 
within or external to the def ibrillator, or by self-test mech- 
anisms internal to the operational components. Factors 
such as user preferences, default component assign- 
ment, and predetermined arrangements of operational 

35 component combinations may be included in the selec- 
tion determination along with the operational integrity of 
each operational component. Significantly, a defibrilla- 
tor implemented in accordance with the present inven- 
tion provides for the selection of a combination of avail- 

40 able, operational components to insure the continued 
availability of an operational defibrillator despite the 
presence of malfunctioning or otherwise degraded com- 
ponents. If certain, non-critical components fail with no 
functionally interchangeable components available, 

45 then the redundant system comprising such a failed 
component is not made operational. The remaining sys- 
tems of the defibrillator may still be implemented to form 
a defibrillator sufficient for defibrillation yet lacking the 
capability to implement the functions allocated to the 

50 malfunctioning, degraded or otherwise absent redun- 
dant system. 

[0008] As used herein, operational components are 
considered to be "functionally interchangeable" when 
the components perform the same or similar operations 
55 in the same or similar manner. Not every operation per- 
formed by one component of a redundant system is nec- 
essarily performed by all other components of that re- 
dundant system. For example, certain ancillary opera- 
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tions not affecting component performance may not be 
identically performed by all components of a redundant 
system. Also, variations may exist between redundant 
components due to, for example, the type of defibrilla- 
tors for which they were designed, different component 
manufacturers, type of implementation (hardware, 
firmware, or software), and the like. In addition, redun- 
dant systems may be logically or physically associated 
to form a larger redundant system, referred to herein as 
redundant assemblies. An assembly may include, for 
example, all operations systems or all user interface 
components. 

[0009] A number of aspects of the invention are sum- 
marized below, along with different embodiments that 
may be implemented for each of the summarized as- 
pects. It should be understood that the embodiments are 
not necessarily inclusive or exclusive of each other and 
may be combined in any manner that is non -conflicting 
and otherwise possible. It should also be understood 
that these aspects of the invention are exemplary only 
and are considered to be nonlimiting. 
[0010] In one aspect of the invention a defibrillator in- 
cluding one or more redundant systems each including 
at least two functionally interchangeable operational 
components is disclosed. A selection system of the de- 
fibrillator is operationally coupled to the redundant sys- 
tems and is constructed and arranged to select one of 
the operational components from each of the redundant 
systems for current operation in the defibrillator. The se- 
lection is based at least on a relative operational integrity 
of each of the operational components within each re- 
dundant system. 

[0011] In one embodiment, the selection system in- 
cludes an operational status monitor constructed and 
arranged to generate an indication of an operational in- 
tegrity of each of the operational components. The op- 
erational status monitor may be distributed within each 
of the operational components of each of the redundant 
systems. A selection controller determines which oper- 
ational component is to be selected for current operation 
based on the operational integrity of the operational 
components. A switching control system, responsive to 
the selection controller, dynamically configures the re- 
dundant system such that the selected operational com- 
ponent is currently operational and the operational com- 
ponents of the redundant system other than the selected 
operational component are not currently operational. 
The selection system may also be responsive to exter- 
nally-provided selections, such as manual entries made 
by a user of the defibrillator. 

[0012] The redundant systems may include, for ex- 
ample, a high voltage charging circuit for storing energy 
from a power source for subsequent delivery to pads of 
the defibrillator, a power supply, coupled to a power 
source, for supplying operational power to other com- 
ponents of the defibrillator, an ECG unit for monitoring 
a patient connected to electrodes of the defibrillator, an 
audio recording and playback unit for receiving audio 



input from a microphone, and for presenting audio out- 
put through a speaker of the defibrillator, etc. 
[0013] In alternative embodiments, the operational 
components of each redundant system are logically dis- 

s tributed across redundant assemblies. Each redundant 
assembly includes operational components that are 
functionally interchangeable with operational compo- 
nents of other redundant assemblies. In such embodi- 
ments, the selection system selects one of the redun- 

io dant assemblies for current operation in the defibrillator. 
The redundant assemblies may take on any desired ar- 
rangement. For example, the defibrillator may include 
redundant assemblies each comprising all critical com- 
ponents of the defibrillator. The operational redundant 

is assembly may include some of the noted operational 
components, such as a high voltage charging circuit, a 
defibrillation control unit, and an ECG unit. 
[0014] In another aspect of the invention a defibrillator 
including one or more redundant systems each includ- 

20 jng at least two operational components that are func- 
tionally interchangeable with the other operational com- 
ponents of that redundant system. Only one operational 
component of each redundant system is selected for op- 
erational based on a relative operational integrity of 

25 each of the operational components in that redundant 
system. The defibrillator includes a selection system for 
making such a selection. The selection system includes 
an operational status monitor constructed and arranged 
to generate an indication of the operational status of the 

30 operational components. The selection system also in- 
cludes a selection controller that determines which of 
the operational components are to be selected for cur- 
rent operation in the defibrillator based on an operation- 
al integrity derived from at least the status information 

35 provided by the monitor. Preferably, the selection sys- 
tem also includes a switching control system that dy- 
namically configures each of the redundant systems 
such that the selected operational component is current- 
ly operational and the operational components of the re- 

40 dundant system other than the selected operational 
component are not currently operational. 
[0015] In another aspect of the invention, a method 
for providing an operational defibrillator is disclosed. 
The method includes 1) providing a defibrillator includ- 

45 jng one or more redundant systems each including at 
least two functionally interchangeable operational com- 
ponents; and 2) selecting one of the operational com- 
ponents from each of the one or more redundant sys- 
tems for current operation on the defibrillator. 

so [0016] The selecting of the operational components 
includes a) determining an operational integrity of the 
operational components; b) determining which of the 
operational components is to be selected for current op- 
eration in the defibrillator based on at least the opera- 

55 tional integrity of the operational components; and, pref- 
erably, c) dynamically configuring the redundant system 
such that the selected operational component is current- 
ly operational and the operational components of the re- 
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dundant system other than the selected operational 
component are not currently operational. 
[0017] Various embodiments of the present invention 
provide certain advantages and overcome certain draw- 
backs of the conventional defibrillators. Not ail embodi- s 
ments of the invention share the same advantages and 
those that do may not share them under all circumstanc- 
es. This being said, embodiments of the present inven- 
tion provide numerous advantages including the noted 
advantage of increasing the operational availability of 
the defibrillator regardless of substantial component fail- 
ures, malfunctions, degradation or unavailability. Spe- 
cifically, embodiments of the present invention allow for 
real-time formation of an operational defibrillator from 
redundant components implemented therein. Further 
features and advantages of the present invention as well 
as the structure and operation of various embodiments 
of the present invention are described in detail below 
with reference to the accompanying drawings. 

Brief Description Of The Drawings 

[0018] This invention is pointed out with particularity 
in the appended claims. The above and further advan- 
tages of this invention may be better understood by re- 
ferring to the following description when taken in con- 
junction with the accompanying drawings, in which: 

Figure 1 is a functional block diagram of a conven- 
tional defibrillator; 

Figure 2A is a functional block diagram of a selec- 
tion system according to one embodiment of the 
present invention; 

Figure 2B is a functional block diagram of a defibril- 
lator according to a first embodiment of the present 
invention; 

Figure 3 is a functional block diagram of a defibril- 
lator according to a second embodiment of the 
present invention; 

Figure 4 is a functional block diagram of a defibril- 
lator according to a third embodiment of the present 
invention; 

Figure 5 is a schematic block diagram of a controller 
for use in the defibrillators illustrated in Figures 2B 
through 4; and 

Figure 6 is a flow chart illustrating an exemplary 
process of selecting between a main defibrillator 
and a back-up defibrillator in accordance with one 
embodiment of the present invention. 

Detailed Description 

[0019] The present invention relates to an external 
defibrillator having redundant components that enable 
the defibrillator to operate when one or more compo- 
nents of the defibrillator malfunctions. Selection of defi- 
brillator components for redundancy can be made in ac- 
cordance with various criteria. For example, redundan- 



cy may be provided for only those components that fail 
frequently, for all operational components, for all user 
interface and operational components, etc. Optionally, 
the redundant components may be physically or logical- 
ly gathered into separate redundant defibrillator subsys- 
tems. Alternatively, the components may be independ- 
ently selectable for operation and not preferentially pre- 
disposed to be selected with other related or unrelated 
components. A selection controller is provided to select 
for current operation one of the physical or logical defi- 
brillators. The controller takes into account whether the 
physical or logical defibrillator or its components are op- 
erational in making this determination. 
[0020] Optionally, the components can be grouped in- 
to a main defibrillator and a back-up defibrillator. The 
controller in this case can receive inputs to determine if 
the main defibrillator is operational. If it is, the controller 
enables the main defibrillator for current operation; if 
not, the back-up defibrillator is enabled for current op- 
eration. The controller may also select individually com- 
ponents from the main defibrillator and back-up defibril- 
lator to form an operational defibrillator when neither the 
main defibrillator nor back-up defibrillator is itself func- 
tional. 

[0021] Selection of one defibrillator or a subset of 
components may be preferential or non-preferential. 
Where preferential, the controller can be configured to 
select from a first group of components ideally enabled 
for current operation and enable redundant components 
for current operation only when the first group or com- 
ponents of the first group are not operational. 
[0022] The controller may determine the operability of 
the defibrillators or components thereof at any of a 
number of points in time. For example, the controller 
may: (1) select in advance components for future oper- 
ation during periodic maintenance or self tests while in 
standby mode; (2) select one of the defibrillators or a 
set of components for current operation when the defi- 
brillator is first turned on; and (3) select one of the defi- 
brillators or a set of components dynamically during op- 
eration of the defibrillator upon determination that one 
or more components is malfunctioning. Periodic refresh 
or monitoring signals, either internally generated by the 
components or responded to by the components, may 
be used to poll the components and defibrillators to de- 
termine their operability. 

[0023] With reference now to the figures and in par- 
ticular with reference to Figure 1, there is illustrated a 
block diagram of a defibrillator in accordance with the 
present invention. Defibrillator 10 includes a recharge- 
able battery pack 12, which supplies power to defibrilla- 
tor 10. As a battery-powered device, defibrillator 10 is 
highly portable and therefore suitable for pre-hospital 
(emergency) use. Battery pack 12 preferably includes 
one or more nickel-cadmium (NiCd), lithium, zinc-air, or 
lead-acid batteries capable of providing power for sev- 
eral hours of operation. As illustrated, battery pack 12 
is electrically coupled to high voltage charging circuit 1 4 
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and supplies charge to a large capacitor contained with- 
in high voltage charging circuit 1 4 utilized to store the 
large charge required to defibrillate an arrhythmic pa- 
tient. Battery pack 12 is further electrically coupled to 
power supply 16, which supplies operational power to 
the individual components within defibrillator 10. High 
voltage charging circuit 14 is electrically connected to a 
pair of pads 18 utilized to deliver a defibrillating shock 
to the patient. The delivery of the defibrillating shock to 
the patient by a high voltage charging circuit 14 is con- 
trolled by defibrillation controller 20. 
[0024] Still referring to FIG. 1, defibrillator 10 further 
includes electrocardiogram (ECG) unit 24, which con- 
trols the monitoring functions of defibrillator 10. From 
the following description of ECG unit 24, those skilled in 
the art will appreciate that ECG unit 24 may be imple- 
mented utilizing a conventional microprocessor and 
support circuitry, or alternatively, an applicationspecific 
integrated circuit (ASIC). ECG unit 24 receives ECG da- 
ta from a patient through chest electrodes 27, which are 
preferably coated with a conductive gel to establish a 
good electrical contact with the patient. The ECG data 
received from the patient is temporarily buffered in an 
ECG data buffer within ECG unit 24 and displayed in 
real-time to the operator of defibrillator 1 0 within display 
device 26. The ECG data is preferably displayed in the 
form of a conventional ECG waveform trace, and may 
be displayed in conjunction with additional information 
extracted from the ECG data, such as the patient's in- 
stantaneous pulse rate. 

[0025] ECG unit 24 is further coupled to user controls 
28, 34, such as a "mark" button which is depressed by 
an operator to store ECG data of interest within memory 
30. During treatment of a patient, the operator typically 
utilizes mark button 28 to record segments of ECG data 
sensed before and after the administration of drugs, the 
delivery of shocks, and other major treatment events. 
The collection of ECG data segments stored in memory 
30 by the operator during treatment of a patient, known 
as a "code" summary, can be printed by the operator of 
defibrillator 10 on thermal printer 32 by depressing re- 
view button 34. In addition, the ECG unit 24 could store 
all of the patient's ECG data sensed during treatment 
within memory 30 in conjunction with a list of marked 
events for later use. Alternatively, ECG unit could auto- 
matically mark events preselected by the operator, such 
as the delivery of shocks. 

[0026] ECG unit 24 is further coupled to audio record- 
ing and playback unit 38 by control signals 36. Audio 
recording and playback unit 38 receives audio input 
from microphone 40 and presents audio output to the 
operator of defibrillator 10 through speaker 42. In re- 
sponse to user input via control 28 or 34, the audio re- 
cording and playback unit 38 sense audio data via mi- 
crophone 40, digitizes the audio data, and stores the au- 
dio data within memory 30. As will be appreciated by 
those skilled in the art, the audio data can be com- 
pressed prior to storage utilizing any of a number of well- 



known data compression algorithms in order to mini- 
mize the amount of memory 30 required to store the au- 
dio data. The audio data may be stored within memory 
30 in association with the ECG data recorded in re- 
5 sponse to the same depression of button 28. The audio 
data may also be stored by audio recording and play- 
back unit 38 on magnetic tape, magnetic disc or optical 
recording media. 

[0027] To facilitate the memory 30, memory 30 pref- 

10 erably comprises a removable and portable data stor- 
age device, such as a PCMCIA (Personal Computer 
Memory Card International Association) memory card; 
however, memory 30 can alternatively be implemented 
as a nonremovable memory. In addition, defibrillator 10 

15 preferably includes an infrared serial port or other data 
communication means (not illustrated) to enable the 
contents of memory 30 to be downloaded directly to a 
computer for review and analysis. 
[0028] The components of defibrillator 10 illustrated 

20 in Figure 1 have been grouped roughly into two catego- 
ries: operational components 140 and user interface 
components 150. The operational components gener- 
ally include components that sense ECG signals, ana- 
lyze the signals, and deliver an electrical shock to the 

25 victim. In the illustrated embodiment, the operational 
components 140 include the battery pack 12, high volt- 
age charging circuit 14, power supply 16, defibrillation 
controller 20, ECG unit 24 and memory 30. 
[0029] The user interface components generally in- 

30 elude components that receive input from the user or 
provide information to the user. In the illustrated embod- 
iment, the user interface components 150 include dis- 
play device 26, thermal printer 32, user interface con- 
trols 28, 34, audio recording and playback unit 38, mi- 

35 crophone 40 and speaker 42. The delineation or group- 
ing of components into operational components 1 40 and 
user interface components 150 is one way of dividing 
the components of the defibrillator into more than one 
subset. Additional groupings are equally possible. 

40 [0030] Figure 2A is a functional block diagram of one 
embodiment of the selection system of the present in- 
vention. As shown therein, the defibrillator 100 includes 
a redundant system 202 that includes three functionally 
interchangeable operational components 204A-204C 

45 from which one operational component 204 is selected 
for current operation by the selection system 206. As 
used herein, the term "component" refers to any opera- 
tional element of the defibrillator 1 00, and may include, 
for example, circuits, processors, mechanical compo- 
50 nents, subsystems or any combination thereof. A sec- 
ond redundant system 202B performing functions differ- 
ent than those performed by redundant system 202 is 
also included in the defibrillator 100. Although not 
shown, redundant system 202B also includes two or 
55 more functionally interchangeable operational compo- 
nents. Manual or automatic selection of one component 
204 in each redundant system 202 is made to form an 
operational defibrillator 100. Manual selection may be 
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made using a switch or selection from a user interface. 
[0031] As used herein, operational components are 
considered to be "functionally interchangeable 0 when 
the components perform the same or similar operations 
is the same or similar manner. Not every operation per- s 
formed by one component of a redundant system is nec- 
essarily performed by the other components. For exam- 
ple, certain ancillary operations not affecting component 
performance may not be identically performed by all 
components of a redundant system. Also, variations 
may exist between redundant components due to, for 
example, being designed for implementation in different 
types of defibrillators, different component manufactur- 
ers, type of implementation (hardware, firmware, or soft- 
ware), and the like. In addition, redundant systems may 
be logically or physically associated to form a larger re- 
dundant system, referred to herein as assemblies. An 
assembly may include, for example, all operations sys- 
tems or all user interface components. Any system or 
component of the defibrillator 100 may be configured as 
a redundant system 202. For example, the high voltage 
charging circuit, power supply, ECG unit or audio re- 
cording and playback unit may be a redundant system 
202. For example, redundant system 202A may be the 
high voltage charging circuit, and include three such cir- 
cuits 204A-204C. 

[0032] The one operational component from each of 
the redundant systems 202 may be logically grouped 
into redundant assemblies. Each redundant assembly 
is therefore functionally interchangeable with other re- 
dundant assemblies. In such embodiments, the selec- 
tion system 206 selects one of the redundant assem- 
blies for current operation in the defibrillator 100. Such 
redundant assemblies may take on any desired ar- 
rangement. For example, as will be described in detail 
below, the defibrillator 100 may include an operational 
redundant assembly and a user interface redundant as- 
sembly. 

[0033] In the illustrative embodiment, the selection 
system 206 includes an operational status monitor 210, 
a selection controller 21 2 and a switching control system 
214. The operational status monitor 210 is constructed 
and arranged to generate operational status information 
of each of the operational components 204 of each of 
the redundant systems 202. The operational status 
monitor 210 may be located locally or distributed within 
each of the operational components 204. Thus, in some 
embodiments, the operational status monitor 210 is not 
as shown in Figure 2A but is distributed at self-test mod- 
ules on each of the operational components 204. In ei- 
ther of these or other embodiments, the operational sta- 
tus monitor 210 generates operational status informa- 
tion 211 that identifies the operational status of each of 
the operational components 204. The operational status 
information may be of any form and of any degree of 
specificity, depending on the type of operational compo- 
nent and its ability to test and evaluate systems, sub- 
systems, components, etc. The operational status infor- 



mation 211 may be provided to the selection controller 
21 2 in any form as well, such as dedicated signals, data 
transferred over a bus, shared memory or the like. 
[0034] The selection controller 21 2 is constructed and 
arranged to determine which of the operational compo- 
nents 204 is to be selected for current operation in the 
defibrillator 100 based on a relative operational integrity 
of the operational components 204. Preferably, such a 
determination is based on a real-time evaluation of a rel- 
ative operational integrity of all operational components 
204 in a redundant system 202. Other factors may be 
considered in addition to the relative operational status 
of the operational components 204, other factors may 
be considered. For example, factors such as user pref- 
erences, default component assignment, and predeter- 
mined arrangements of operational component combi- 
nations may be included in the selection determination 
along with the operational integrity of operational com- 
ponents 204 of each redundant system 202. The selec- 
tion controller 212 may be implemented in hardware, 
firmware, software or any combination thereof. 
[0035] The switching control system 214 is respon- 
sive to the selection controller 212, and is constructed 
and arranged to dynamically configure each redundant 
system such that the selected operational component is 
currently operational and the operational components 
of the redundant system other than the selected opera- 
tional component are not currently operational. The 
switching network 21 4 may be nothing more than an en- 
able/disable signal or flag to the selected operational 
component. In other embodiments, the switching net- 
work 214 may include switches that control the applica- 
tion of power generated by certain components so that 
it is received by the appropriate operational component 
204. Thus, although it is shown as a single unitary ele- 
ment of selection system 206, switching network 214 
may be distributed throughout redundant system 202 to 
control the selection of operational components 204. 
[0036] In the exemplary embodiment illustrated in Fig- 
ure 2B, defibrillator 1 00 is provided with a two redundant 
assemblies 208 each having systems that are function- 
ally interchangeable with the other. As shown, these re- 
dundant assemblies are a main defibrillator 110 and a 
back-up defibrillator 120. In this embodiment, the main 
defibrillator 1 1 0 and back-up defibrillator 1 20 contain re- 
dundant operational components 140 as well as redun- 
dant user interface components 150. In this illustrative 
embodiment, operational status monitor 210 is distrib- 
uted between the main defibrillator 1 1 0 and the back-up 
defibrillator 120 and switching network 214 are shown 
as two signal lines traveling from a selection controller 
130 to the defibrillators 110, 120. 
[0037] The selection controller 1 30 is provided to se- 
lect one of the main defibrillator 110 and the back-up 
defibrillator 120 for operation, depending on status sig- 
nals provided by the operational components 140, 140' 
and, optionally, the user interface components 150, 
150'. The controller 130 processes the received signals 
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to select one of the defibrillators that is most likely to be 
operational, and enables the selected defibrillator for 
current operation. 

[0038] Not all components, systems, etc., are re- 
quired to be redundant systems. For example, in the em- 
bodiment illustrated in Figure 3, the defibrillator 100 is 
provided with a main defibrillator 110 and a back-up de- 
fibrillator 1 20. In this embodiment, however, a single set 
of user interface components 150 are provided. The 
main defibrillator 1 1 0 and back-up defibrillator 1 20 in this 
embodiment thus contain only redundant operational 
components 1 40, 1 40'. A selection controller 1 30 is pro- 
vided to select one of the main defibrillator 110 and the 
back-up defibrillator 120 for operation, depending on 
status signals provided by the operational components 
140, 140'. The controller 130 processes the received 
signals to select one of the defibrillators that is most like- 
ly to be operational, and enables the selected defibrilla- 
tor for current operation. 

[0039] Redundant user interface controls is advanta- 
geous, since an malfunction may occur, for example, in 
the display of the defibrillator. Operating the defibrillator 
without a display would present additional challenges to 
the operator, but may be made possible through audio 
prompts and via reception of audio commands, by com- 
municating with a peripheral device via an I/O port, etc. 
Accordingly, redundancy of the user interface compo- 
nents may not be essential to operation of the defibril- 
lator. Thus, to minimize the cost of the portable defibril- 
lator, the embodiment illustrated in Figure 3 provides for 
redundancy of only the operational components. By 
contrast, Figure 2 provides redundancy for all compo- 
nents so that if any component of the defibrillator mal- 
functions, the other defibrillator can be used. An inter- 
mediate position may be taken as well. For example, it 
may be possible to provide redundancy of some opera- 
tional components and some user interface compo- 
nents without providing redundancy of all operational 
components or all user interface components. Likewise, 
it may not be necessary to provide redundancy for the 
battery pack, since spare batteries are typically carried 
along with the defibrillator. 

[0040] Another embodiment of the defibrillator is illus- 
trated in Figure 4. In this embodiment, two functionally 
interchangeable operational components are illustrated 
in each of four redundant systems 402A-402D. One op- 
erational component is selected for current operation 
from each redundant system 402 based on any number 
of factors, such as those noted above. It should be un- 
derstood that this embodiment is not limited in this re- 
gard, and the concepts disclosed below apply equally 
where redundancy of additional or fewer components is 
provided. 

[0041] In the embodiment of Figure 4, the defibrillator 
10 has also been logically divided into two redundant 
assemblies: a main defibrillator 110 and a back-up de- 
fibrillator 120. However, in the embodiment of Figure 4, 
the selection controller 130 individually selects opera- 



tional components from each of the redundant systems 
402A-402D rather than selection either the main or 
back-up defibrillator. This is advantageous, for example, 
where one or more components of both the main defi- 

5 brillator and back-up defibrillator malfunction at the 
same time. By selecting individually components from 
a plurality of redundant systems, the selection controller 
1 30 can piece together an operational defibrillator to en- 
sure that the defibrillator 10 will function as directed by 

10 the user. 

[0042] For example, the selection controller 130 of de- 
fibrillator 10 may determine that defibrillation control 20 
and high voltage charging circuit 1 4' are malfunctioning. 
If individual selection of redundant components was not 

is possible, the defibrillator 10 would not be able to defi- 
brillate a victim, even though there are two complete 
sets of complimentary operational components. By pro- 
viding for individual selection, however, the controller 
130 can, for example, select for operation defibrillation 

20 control 20', high voltage charging circuit 1 4, battery pack 
12 and power supply 16 to form a complete defibrillator. 
Likewise, if one of the battery packs is low or is taking 
a long time to charge the high voltage charging circuit 
14, the controller 1 30 can either switch to the redundant 

25 battery pack 1 2' or can enable simultaneously both bat- 
tery pack 12 and battery pack 12*. 
[0043] In the exemplary embodiment illustrated in Fig- 
ure 4, the controller 1 30 is connected to the components 
of the main defibrillator 1 1 0 and back-up defibrillator 1 20 

30 via a bus 170. The controller 130 uses the bus 170 to 
receives status signals from the defibrillator compo- 
nents and to send enable signals to the defibrillator com- 
ponents. Switches 180 are provided to enable selective 
interconnection of components from main defibrillator 

35 no and back-up defibrillator 120 to allow components 
from the two defibrillators to work together to form an 
operational defibrillator. This may be advantageous 
where multiple components of the defibrillator malfunc- 
tion simultaneously. Optionally, the switches 180 can be 

40 logically or physically associated with the defibrillator 
components such that communication with the switches 
180 is not required independent of communication with 
defibrillator components. In Figure 4, the designation of 
defibrillator components as belonging to the main defi- 
es brillator or back-up defibrillator has less significance 
since the components in this exemplary embodiment 
are individually selectable. While a bus has been illus- 
trated as interconnecting the controller 130 with the in- 
dividual components, dedicated control lines, shared 

50 memory, and any number of other known devices for 
facilitating communication between components could 
equivalent^ be used. 

[0044] In the embodiment illustrated in Figure 4, 
switches 1 80 have been provided on the outputs of the 
55 defibrillation control units 20, 20\ battery pack 12, 12' 
and power supply 16, 16'. The switches may be integral 
to these components or may be interposed between the 
various components as illustrated. The switches 180 are 
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controlled by the controller 1 30 via bus 1 70 to facilitate 
enabling one or more components of the defibrillator for 
operation. Other ways of enabling the components for 
operation would be readily apparent to a person of or- 
dinary skill in the art. 

[0045] The controller 130 may receive inputs indica- 
tive of the status or health of the subsystems from mul- 
tiple components of the defibrillator 100. Thus, for ex- 
ample as illustrated in Figure 5, the controller 130 may 
receive input directly from the user, from operational 
components 140 of both the main defibrillator 110 and 
the back-up defibrillator 120, or from the interface com- 
ponents 150. As illustrated in Figure 5, the inputs could 
include an indication that one of the defibrillators in- 
cludes, e.g., a defective charging circuit, a defective 
ECG unit or a defective analysis circuit. Likewise, the 
controller 130 could receive inputs indicating that the 
thermal printer, microphone, speaker or any other com- 
ponent is defective. The controller 1 30 can use this input 
during selection of one of the main defibrillator 110 and 
back-up defibrillators for operation. Optionally, where 
the input indicates that a non-essential component has 
malfunctioned, the defibrillator 1 00 may choose to warn 
the operator. Warning the operator can enable the op- 
erator to elect to use a different defibrillator or to operate 
the defibrillator without the non-essential component. 
Non-essential components in this regard can include 
any component that is not required to enable the defi- 
brillator to administer a defibrillatory shock to the victim. 
[0046] Figure 6 illustrates functions performed by 
software running on controller 130 if the controller 130 
is implemented as a microprocessor, or functions per- 
formed by the hardware comprising controller 130 
where the controller 1 30 is implemented as an ASIC. As 
shown in Figure 6, the controller 130 first determines if 
the user has selected the back-up defibrillator for oper- 
ation 200. Optionally, this step may be avoided and the 
defibrillator may be preprogrammed to first evaluate op- 
erational characteristics of the main defibrillator and 
then to evaluate operational characteristics of the back- 
up defibrillator, or vise versa. 

[0047] The controller 1 30 then determines if the main 
defibrillator is operational 202. If the main defibrillator is 
operational, the controller 130 will select the main defi- 
brillator and cause the main defibrillator to be used to 
defibrillate the victim 204. If the main defibrillator is not 
operational, the controller 1 30 will determine if the back- 
up defibrillator is operational 206. If the back-up defibril- 
lator is operational, the controller 130 will select the 
back-up defibrillator and cause the back-up defibrillator 
to be used during the defibrillation process 212. Analo- 
gously, if the back-up defibrillator has been initially se- 
lected at 200, the controller 130 will first look to see if 
the back-up defibrillator is operational 208 and then, if 
necessary, look to see if the main defibrillator is opera- 
tional 210. In either case, if the controller 130 deter- 
mines that both the main defibrillator and the back-up 
defibrillator are not functional, it will alert the operator 



that the defibrillator cannot be operated safely and turn 
itself off 214. Alternatively, if the defibrillator is provided 
with a system such as that illustrated in Figure 4, the 
defibrillator could attempt to piece together functional 
5 components from the main and back-up defibrillators 
prior to notifying the operator that malfunctions prevent 
the defibrillator from operating. 

[0048] Although the concepts disclosed in this appli- 
cation has been explained with respect to a portable ex- 

io ternal defibrillator, the principles described herein could 
easily be applied to other medical devices or electronic 
equipment used by emergency medical personnel, such 
as EKG monitors, Sp0 2 monitors, etc. 
[0049] It should be understood that various changes 

is and modifications of the embodiments shown in the 
drawings and described in the specification may be 
made within the spirit and scope of the present inven- 
tion. Accordingly, it is intended that all matter contained 
in the above description and shown in the accompany- 

20 ing drawings be interpreted in an illustrative and not in 
a limiting sense. The invention is limited only as defined 
in the following claims and the equivalents thereto. 



25 Claims 

1. A defibrillator (10), comprising: 

one or more redundant systems (202) each 
30 comprising at least two functionally inter- 

changeable operational components (204); 
and 

a selection system (206) operationally coupled 
to said one or more redundant systems (206), 

35 constructed and arranged to select one of said 

operational components (204) from each of 
said one or more redundant systems (202) for 
current operation in the defibrillator (10) based 
at least on an operational integrity of each of 

40 said operational components. 

2. The defibrillator (1 0) of claim 1 , wherein said one or 
more redundant systems (202) comprises: 

a high voltage charging circuit (14) for storing 
45 energyfromapowersource (12) for subsequent de- 
livery to pads (27) of the defibrillator (10). 

3. The defibrillator (1 0) of claim 2, wherein said one or 
more redundant systems (202) further comprises: 

50 a power supply (12), coupled to a power 

source (1 2), for supplying operational power to oth- 
er components of the defibrillator (10). 

4. The defibrillator of claim 3, wherein said selection 
55 system (206) is responsive to externally-provided 

selections. 

5. The defibrillator of claim 1 , 
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wherein said one or more redundant systems 
are logically divided into redundant assemblies 
(110, 120) each including redundant systems 
(402) that are functionally interchangeable with 
redundant systems of other redundant assem- 
blies, 

wherein said selection system (130) selects 
one of said redundant assemblies for current 
operation in the defibrillator. 

6. The defibrillator of claim 5, wherein said redundant 
assemblies comprises: 

an operational redundant assembly (140) in- 
cluding a high voltage charging circuit (14), a 
defibrillation control (20), and an ECG unit (24); 
and 

a user interface redundant assembly (1 50) in- 
cluding a display device, an audio recording 
and playback unit (38), a printer (32), a speaker 
(42) and a microphone (40). 

7. The defibrillator of claim 5, 

wherein said redundant assemblies are logical- 
ly grouped to form a main defibrillator (110) and 
a back-up defibrillator (120), 
wherein said selection system (130) selects 
one of said main defibrillator and said back-up 
defibrillator for current operation in the defibril- 
lator. 

8. A method for providing an operational defibrillator, 
comprising: 

1) providing a defibrillator (10) comprising one 
or more redundant systems (202) each com- 
prising at least two functionally interchangea- 
ble operational components (204); and 

2) selecting one of said operational compo- 
nents from each of said one or more redundant 
systems for current operation on the defibrilla- 
tor. 

9. The method of claim 8, wherein said selecting com- 
prises: 

a) determining an operational integrity of said 
operational components (204); 

b) determining which of said operational com- 
ponents (204) is to be selected for current op- 
eration in the defibrillator based on at least said 
operational integrity of said operational compo- 
nents. 

10. The method of claim 9, wherein said selecting fur- 
ther comprises: 

c) dynamically configuring said redundant 



system such that said selected operational compo- 
nent is currently operational and said operational 
components of said redundant system other than 
said selected operational component are not cur- 
5 rently operational. 
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